#!/usr/bin/env bash # ------------------------------------------------------------------------- # WordOps install and update script # ------------------------------------------------------------------------- # Website: https://wordops.net # GitHub: https://github.com/WordOps/WordOps # Copyright (c) 2019-2025 - WordOps # This script is licensed under M.I.T # ------------------------------------------------------------------------- # wget -qO wo wops.cc && sudo -E bash wo # ------------------------------------------------------------------------- # Version 3.22.0 - 2024-12-06 # ------------------------------------------------------------------------- # CONTENTS # --- # 1. VARIABLES AND DECLARATIONS # 2. PREPARE FOR INSTALLATION # 3. INSTALLATION # 4. ### # 1 - Set the CLI output colors ### CSI='\033[' TPUT_RESET="${CSI}0m" TPUT_FAIL="${CSI}1;31m" TPUT_ECHO="${CSI}1;36m" TPUT_OK="${CSI}1;32m" wo_lib_echo() { echo -e "${TPUT_ECHO}${*}${TPUT_RESET}" } wo_lib_echo_info() { echo -e "$*" } wo_lib_echo_fail() { echo -e "${TPUT_FAIL}${*}${TPUT_RESET}" } ### # 1 - Capture errors ### wo_lib_error() { echo -e "[ $(date) ] ${TPUT_FAIL}${*}${TPUT_RESET}" exit "$2" } ### # 1 - script argument parsing ### while [ "$#" -gt 0 ]; do case "$1" in -b | --branch) wo_branch="$2" shift ;; --force) wo_force_install="y" ;; --travis) wo_travis="y" wo_force_install="y" ;; --mainline | --beta) wo_branch="mainline" ;; -s | --silent) wo_force_install="y" ;; --purge | --uninstall) wo_purge="y" ;; *) # positional args ;; esac shift done ### # 1 - Check whether the installation is called with elevated rights ### if [[ $EUID -ne 0 ]]; then wo_lib_echo_fail "Sudo privilege required..." wo_lib_echo_fail "Use: wget -qO wo wops.cc && sudo bash wo " exit 100 fi export DEBIAN_FRONTEND=noninteractive unset LANG export LANG='en_US.UTF-8' export LC_ALL='C.UTF-8' ### # 1- Main functions ### # check if a command exist command_exists() { command -v "$@" >/dev/null 2>&1 } # run functions and exit on failure _run() { if [ -n "$2" ]; then echo -ne "${TPUT_ECHO}${2}${TPUT_RESET}\t" fi if ! { "$1" >>"$wo_install_log" 2>&1; }; then if [ -n "$2" ]; then echo -e "${TPUT_FAIL}[KO]${TPUT_RESET}" fi else if [ -n "$2" ]; then echo -e "[${TPUT_OK}OK${TPUT_RESET}]" fi fi } _curl() { curl -m 10 --retry 3 -sL "$@" } wo_init_variables() { if [ -z "$wo_branch" ]; then if [ "$wo_travis" = "y" ]; then wo_branch=updating-configuration else wo_branch=master fi fi readonly wo_install_log=/var/log/wo/install.log readonly TIME_FORMAT='%d-%b-%Y-%H%M%S' TIME=$(date +"$TIME_FORMAT") readonly TIME readonly NGINX_BACKUP_FILE="/var/lib/wo-backup/nginx-backup.$TIME.tar.zst" readonly EE_BACKUP_FILE="/var/lib/wo-backup/ee-backup.$TIME.tar.zst" readonly WO_BACKUP_FILE="/var/lib/wo-backup/wo-backup.$TIME.tar.zst" if [ -x /usr/local/bin/ee ]; then ee_migration=1 elif [ -x /usr/local/bin/wo ]; then wo_upgrade=1 fi } ### # 1 - Checking linux distro ### wo_check_distro() { local wo_linux_distro wo_linux_distro=$(lsb_release -is) local wo_distro_version wo_distro_version=$(lsb_release -sc) if [ -z "$wo_force_install" ]; then if [ "$wo_linux_distro" != "Ubuntu" ] && [ "$wo_linux_distro" != "Debian" ] && [ "$wo_linux_distro" != "Raspbian" ]; then wo_lib_echo_fail "WordOps (wo) only supports Ubuntu, Debian & Raspbian at the moment." wo_lib_echo_fail "You can bypass this warning by adding the flag --force to the install command" wo_lib_echo_fail "Feel free to open a pull-request if you want to add support for another Linux distributions" exit 100 else check_wo_linux_distro=$(lsb_release -sc | grep -E "buster|focal|jammy|bullseye|bookworm|noble") if [ -z "$check_wo_linux_distro" ]; then wo_lib_echo_fail "WordOps (wo) only supports Ubuntu 20.04/22.04/24.04 LTS, Debian 10.x/11.x/12.x and Raspbian 10x./11.x/12.x \n You can bypass this warning by adding the flag --force to the install command" exit 100 fi fi fi } ### # 1 - To prevent errors or unexpected behaviour, create the log and ACL it ### wo_dir_init() { local wo_log_dir=/var/log/wo local wo_backup_dir=/var/lib/wo-backup local wo_tmp_dir=/var/lib/wo/tmp if [ ! -d "$wo_log_dir" ] || [ ! -d "$wo_backup_dir" ] || [ ! -d "$wo_tmp_dir" ]; then mkdir -p "$wo_backup_dir" "$wo_log_dir" "$wo_tmp_dir" # create wordops log files touch /var/log/wo/{wordops.log,install.log} chmod -R 750 "$wo_log_dir" "$wo_backup_dir" "$wo_tmp_dir" chown -R root:adm "$wo_log_dir" fi } ### # 2 - Setup the dependencies for installation #### wo_install_dep() { local wo_linux_distro wo_linux_distro=$(lsb_release -is) if [ "$wo_linux_distro" == "Ubuntu" ]; then # install dependencies add-apt-repository ppa:git-core/ppa -y apt-get --option=Dpkg::options::=--force-confmiss --option=Dpkg::options::=--force-confold --assume-yes install \ build-essential curl gzip python3-pip python3-apt python3-venv gcc python3-dev sqlite3 git tar software-properties-common pigz \ gnupg2 cron ccze rsync apt-transport-https tree haveged ufw unattended-upgrades tzdata ntp zstd idn \ python3-distutils-extra libapt-pkg-dev bash-completion >/dev/null 2>&1 else # install dependencies apt-get --option=Dpkg::options::=--force-confmiss --option=Dpkg::options::=--force-confold --assume-yes install \ build-essential curl gzip dirmngr sudo python3-pip python3-apt python3-venv gcc python3-dev ca-certificates sqlite3 git tar \ software-properties-common pigz apt-transport-https gnupg2 cron ccze rsync tree haveged ufw unattended-upgrades tzdata ntp zstd idn \ python3-distutils-extra libapt-pkg-dev bash-completion >/dev/null 2>&1 # add php repository gpg key curl -sSLo /tmp/debsuryorg-archive-keyring.deb https://packages.sury.org/debsuryorg-archive-keyring.deb dpkg -i /tmp/debsuryorg-archive-keyring.deb && rm -f /tmp/debsuryorg-archive-keyring.deb fi locale-gen en # enable unattended upgades if [ ! -f /etc/apt/apt.conf.d/20auto-upgrades ]; then cp -f /usr/share/unattended-upgrades/20auto-upgrades /etc/apt/apt.conf.d/20auto-upgrades fi } wo_download_gpg_keys() { local wo_distro_version wo_distro_version=$(lsb_release -rs | grep -oE '[0-9]+') local wo_linux_distro wo_linux_distro=$(lsb_release -is) # create directories mkdir -p /usr/share/keyrings /etc/apt/keyrings # redis gpg key curl -fsSL https://packages.redis.io/gpg | gpg --dearmor | tee /usr/share/keyrings/redis-archive-keyring.gpg >/dev/null 2>&1 # mariadb curl -o /etc/apt/keyrings/mariadb-keyring.pgp 'https://mariadb.org/mariadb_release_signing_key.pgp' # nginx if [ "$wo_linux_distro" == "Debian" ]; then curl -fsSL "https://download.opensuse.org/repositories/home:virtubox:WordOps/Debian_$wo_distro_version/Release.key" | gpg --dearmor | tee /usr/share/keyrings/wordops-archive-keyring.gpg >/dev/null 2>&1 fi if [ "$wo_linux_distro" == "Raspbian" ]; then curl -fsSL "https://download.opensuse.org/repositories/home:virtubox:WordOps/Raspbian_$wo_distro_version/Release.key" | gpg --dearmor | tee /usr/share/keyrings/wordops-archive-keyring.gpg >/dev/null 2>&1 fi } wo_update_repo() { local wo_linux_codename wo_linux_codename=$(lsb_release -sc) if [ -f /etc/apt/sources.list.d/wo-repo.list ]; then # properly define sury repository if grep -q sury /etc/apt/sources.list.d/wo-repo.list; then echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ $wo_linux_codename main" >/etc/apt/sources.list.d/php.list fi # properly define mariadb repository repo_file="/etc/apt/sources.list.d/wo-repo.list" if grep -q mariadb /etc/apt/sources.list.d/wo-repo.list; then repo_number=$(grep -c "mariadb" "$repo_file") if [ "$repo_number" -gt 1 ]; then get_urls=$(grep "mariadb" "$repo_file" | awk '{print $3}') mariadb_repo=$(echo "$get_urls" | sort -t '/' -k 6,6 -V | tail -n 1) else mariadb_repo=$(grep mariadb /etc/apt/sources.list.d/wo-repo.list | awk '{print $3}') fi echo "deb [signed-by=/etc/apt/keyrings/mariadb-keyring.pgp] $mariadb_repo $wo_linux_codename main" >/etc/apt/sources.list.d/mariadb.list fi # properly define redis repository if grep -q redis /etc/apt/sources.list.d/wo-repo.list; then echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] https://packages.redis.io/deb $wo_linux_codename main" >/etc/apt/sources.list.d/redis.list fi # properly define WordOps nginx repository if grep -q WordOps /etc/apt/sources.list.d/wo-repo.list; then wo_repo=$(grep WordOps /etc/apt/sources.list.d/wo-repo.list | awk -F\ '{ print $2 }') echo "deb [signed-by=/usr/share/keyrings/wordops-archive-keyring.gpg] $wo_repo /" >/etc/apt/sources.list.d/wordops.list fi # cleanup wo-repo.list if grep -Eqv "WordOps|mariadb|sury|redis" /etc/apt/sources.list.d/wo-repo.list; then rm -f /etc/apt/sources.list.d/wo-repo.list else clean_wo_repo=$(grep -Ev "WordOps|mariadb|sury|redis" /etc/apt/sources.list.d/wo-repo.list) echo "$clean_wo_repo" >/etc/apt/sources.list.d/wo-repo.list fi fi } wo_timesync() { # set default ntp pools if [ "$wo_distro_codename" != "bookworm" ] && [ "$wo_distro_codename" != "noble" ]; then if [ -f /etc/systemd/timesyncd.conf ]; then if ! grep -q "time.cloudflare.com" /etc/systemd/timesyncd.conf; then sed -e 's/^#NTP=/NTP=time.cloudflare.com 0.ubuntu.pool.ntp.org 1.ubuntu.pool.ntp.org 2.ubuntu.pool.ntp.org 3.ubuntu.pool.ntp.org/' -i /etc/systemd/timesyncd.conf # enable ntp timedatectl set-ntp 1 fi fi fi } ### # 3 - Create/migrate the essentials ### wo_sync_db() { ### # Switching from EE -> WO ### if [ ! -f /var/lib/wo/dbase.db ]; then if [ -f /var/lib/ee/ee.db ]; then # Make a backup of the EasyEngine database cp /var/lib/ee/ee.db /var/lib/wo/dbase-ee.db # Copy ee database cp /var/lib/ee/ee.db /var/lib/wo/dbase.db else if [ -d /etc/nginx/sites-available ] && [ -d /var/www ]; then # Create an empty database for WordOps echo "CREATE TABLE sites ( id INTEGER PRIMARY KEY AUTOINCREMENT, sitename UNIQUE, site_type CHAR, cache_type CHAR, site_path CHAR, created_on TIMESTAMP DEFAULT CURRENT_TIMESTAMP, is_enabled INT, is_ssl INT, storage_fs CHAR, storage_db CHAR, db_name VARCHAR, db_user VARCHAR, db_password VARCHAR, db_host VARCHAR, is_hhvm INT INT DEFAULT '0', php_version VARCHAR );" | sqlite3 /var/lib/wo/dbase.db # Check site is enable/live or disable AV_SITES="$(basename -a /etc/nginx/sites-available/* | grep -v default)" for site in $AV_SITES; do if [ -h "/etc/nginx/sites-enabled/$site" ]; then wo_site_status='1' else wo_site_status='0' fi # Acquire information about the current nginx configuration wo_site_current_type=$(grep "common/" "/etc/nginx/sites-available/$site" | awk -F "/" '{print $2}') if echo "$wo_site_current_type" | grep -q "redis"; then wo_site_current_cache="wpredis" elif echo "$wo_site_current_type" | grep -q wpsc; then wo_site_current_cache="wpsc" elif echo "$wo_site_current_type" | grep -q wpfc; then wo_site_current_cache="wpfc" else wo_site_current_cache="basic" fi if echo "$wo_site_current_type" | grep -q wp; then if echo "$wo_site_current_type" | grep -q wpsubdir; then wo_site_current="wpsubdir" elif echo "$wo_site_current_type" | grep -q wpsudomain; then wo_site_current="wpsubdomain" else wo_site_current="wp" fi else if echo "$wo_site_current_type" | grep -q location; then wo_site_current="proxy" elif echo "$wo_site_current_type" | grep -q php; then wo_site_current="html" else if [ -f "/var/www/${site}/ee-config.php" ] || [ -f "/var/www/${site}/wo-config.php" ]; then wo_site_current="mysql" else wo_site_current="php" fi fi fi wo_webroot="/var/www/$site" # Import the configuration into the WordOps SQLite database echo "INSERT INTO sites (sitename, site_type, cache_type, site_path, is_enabled, is_ssl, storage_fs, storage_db) VALUES (\"$site\", \"$wo_site_current\", \"$wo_site_current_cache\", \"$wo_webroot\", \"$wo_site_status\", 0, 'ext4', 'mysql');" | sqlite3 /var/lib/wo/dbase.db done fi fi # echo "UPDATE sites SET php_version = REPLACE(php_version, '5.6', '7.2');" | sqlite3 /var/lib/wo/dbase.db # echo "UPDATE sites SET php_version = REPLACE(php_version, '7.0', '7.3');" | sqlite3 /var/lib/wo/dbase.db fi } # Once again, set the proper ACL on the WordOps configuration directory secure_wo_db() { # The owner is root chown -R root:root /var/lib/wo # Only allow access by root, block others chmod -R 600 /var/lib/wo } # Update the WP-CLI version wo_update_wp_cli() { WP_CLI_PATH=$(command -v wp) if [ -n "$WP_CLI_PATH" ]; then rm -rf "$WP_CLI_PATH" fi # Update WP-CLI to the most recent version wget -qO /usr/local/bin/wp https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar chmod +x /usr/local/bin/wp [ ! -h /usr/bin/wp ] && { ln -s /usr/local/bin/wp /usr/bin/ } [ -d /etc/bash_completion.d ] && { wget -qO /etc/bash_completion.d/wp-completion.bash https://raw.githubusercontent.com/wp-cli/wp-cli/master/utils/wp-completion.bash } } wo_install_acme_sh() { # check if acme.sh is already installed if [ ! -x /etc/letsencrypt/acme.sh ]; then # clone the git repository if [ -d /opt/acme.sh/.git ]; then git -C /opt/acme.sh pull origin master else git clone --depth=50 https://github.com/Neilpang/acme.sh.git /opt/acme.sh -q fi cd /opt/acme.sh || exit 1 # create conf directories mkdir -p /etc/letsencrypt/{config,live,renewal} # install acme.sh ./acme.sh --install \ --home /etc/letsencrypt \ --config-home /etc/letsencrypt/config \ --cert-home /etc/letsencrypt/renewal fi if [ -x "$HOME/.acme.sh/acme.sh" ]; then # backup acme.sh folder /bin/tar -I zstd -cf /var/lib/wo-backup/acme.sh.tar.zst "$HOME/.acme.sh" # rsync previous certificates to new acme.sh location /usr/bin/rsync -rltgoDpz --exclude="account.conf" \ --exclude="acme.sh" \ --exclude="acme.sh.env" \ --exclude="deploy" \ --exclude="dnsapi" \ --exclude="http.header" \ --exclude="ca" \ "$HOME/.acme.sh/" \ /etc/letsencrypt/renewal/ # remove previous acme.sh folder rm -rf "$HOME/.acme.sh" mkdir "$HOME/.acme.sh" touch "$HOME/.acme.sh/acme.sh.env" # removing previous cronjob fi # Let's Encrypt .well-known folder setup if [ ! -d /var/www/html/.well-known/acme-challenge ]; then mkdir -p /var/www/html/.well-known/acme-challenge fi chown -R www-data:www-data /var/www/html /var/www/html/.well-known chmod 750 /var/www/html /var/www/html/.well-known if [ -x /etc/letsencrypt/acme.sh ]; then export LE_WORKING_DIR="/etc/letsencrypt" export LE_CONFIG_HOME="/etc/letsencrypt/config" /etc/letsencrypt/acme.sh --config-home '/etc/letsencrypt/config' --upgrade --auto-upgrade /etc/letsencrypt/acme.sh --config-home '/etc/letsencrypt/config' --uninstall-cronjob /etc/letsencrypt/acme.sh --config-home '/etc/letsencrypt/config' --install-cronjob /etc/letsencrypt/acme.sh --set-default-ca --server letsencrypt fi } # WordOps install wo_install() { local python_ver python_ver=$(python3 -c "import sys; print(sys.version_info[1])") local wo_distro_codename wo_distro_codename=$(lsb_release -sc) local wo_linux_distro wo_linux_distro=$(lsb_release -is) if [ -d /usr/local/lib/python3."$python_ver"/dist-packages ]; then cd /usr/local/lib/python3."$python_ver"/dist-packages || exit 1 fi if [ "$wo_distro_codename" != "bookworm" ]; then pip uninstall -yq wo wordops ee fi cd || exit 1 if [ -d /opt/wo/lib/python3."$python_ver"/site-packages/apt ]; then source /opt/wo/bin/activate /opt/wo/bin/pip install -U setuptools /opt/wo/bin/pip install -U pip wheel distro /opt/wo/bin/pip uninstall psutil -y /opt/wo/bin/pip uninstall SQLAlchemy -y else rm -rf /opt/wo python3 -m venv /opt/wo source /opt/wo/bin/activate /opt/wo/bin/pip install -U setuptools /opt/wo/bin/pip install -U pip wheel /opt/wo/bin/pip install -U distro if [ "$wo_linux_distro" = "Debian" ] || [ "$wo_linux_distro" = "Raspbian" ]; then if [ "$wo_distro_codename" = "stretch" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.4.y#egg=python-apt elif [ "$wo_distro_codename" = "bullseye" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.2.1#egg=python-apt elif [ "$wo_distro_codename" = "bookworm" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.5.3#egg=python-apt else /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.8.4.y#egg=python-apt fi else if [ "$wo_distro_codename" = "focal" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.0.0#egg=python-apt elif [ "$wo_distro_codename" = "bionic" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.6.y#egg=python-apt elif [ "$wo_distro_codename" = "jammy" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.2.1#egg=python-apt else /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.8.y#egg=python-apt fi fi fi if [ "$wo_branch" = "master" ]; then /opt/wo/bin/pip install -U wordops --upgrade-strategy=eager else /opt/wo/bin/pip install -I "git+https://github.com/WordOps/WordOps.git@$wo_branch#egg=wordops" --upgrade-strategy=eager fi local python_venv python_venv=$(python3 -c "import sys; print(sys.version_info[1])") cp -rf /opt/wo/lib/python3."$python_venv"/site-packages/usr/* /usr/ cp -rn /opt/wo/lib/python3."$python_venv"/site-packages/etc/* /etc/ cp -f /opt/wo/lib/python3."$python_venv"/site-packages/etc/bash_completion.d/wo_auto.rc /etc/bash_completion.d/wo_auto.rc rm -rf /usr/local/bin/wo /usr/local/lib/python3."$python_venv"/dist-packages/{etc,usr} ln -s /opt/wo/bin/wo /usr/local/bin/ deactivate if [ ! -d /opt/wo/lib/python3."$python_ver"/site-packages/apt ]; then python3 -m venv --system-site-packages /opt/wo fi } # Clone Github repository if it doesn't exist wo_travis_install() { local python_ver python_ver=$(python3 -c "import sys; print(sys.version_info[1])") local wo_distro_codename wo_distro_codename=$(lsb_release -sc) local wo_linux_distro wo_linux_distro=$(lsb_release -is) if [ -d ./dist ]; then rm -rf dist fi if [ -f ./setup.py ]; then if [ -d /opt/wo/lib/python3."$python_ver"/site-packages/apt ]; then source /opt/wo/bin/activate /opt/wo/bin/pip install -U setuptool /opt/wo/bin/pip install -U pip wheel /opt/wo/bin/pip uninstall psutil -y /opt/wo/bin/pip uninstall SQLAlchemy -y else rm -rf /opt/wo python3 -m venv /opt/wo source /opt/wo/bin/activate /opt/wo/bin/pip install -U setuptools /opt/wo/bin/pip install -U pip wheel if [ "$wo_linux_distro" = "Debian" ] || [ "$wo_linux_distro" = "Raspbian" ]; then if [ "$wo_distro_codename" = "stretch" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.4.y#egg=python-apt elif [ "$wo_distro_codename" = "bullseye" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.2.1#egg=python-apt elif [ "$wo_distro_codename" = "bookworm" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.5.3#egg=python-apt else /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.8.4.y#egg=python-apt fi else if [ "$wo_distro_codename" = "focal" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.0.0#egg=python-apt elif [ "$wo_distro_codename" = "bionic" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@1.6.y#egg=python-apt elif [ "$wo_distro_codename" = "jammy" ]; then /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.2.1#egg=python-apt else /opt/wo/bin/pip install git+https://salsa.debian.org/apt-team/python-apt.git@2.8.y#egg=python-apt fi fi fi /opt/wo/bin/pip install -U . --upgrade-strategy=eager else /opt/wo/bin/pip install -U "git+https://github.com/WordOps/WordOps.git@$wo_branch#egg=wordops" --upgrade-strategy=eager fi cp -rf /opt/wo/lib/python3."$python_ver"/site-packages/usr/* /usr/ cp -rn /opt/wo/lib/python3."$python_ver"/site-packages/etc/* /etc/ cp -f /opt/wo/lib/python3."$python_ver"/site-packages/etc/bash_completion.d/wo_auto.rc /etc/bash_completion.d/wo_auto.rc rm -f /usr/local/bin/wo ln -s /opt/wo/bin/wo /usr/local/bin/ deactivate } wo_upgrade_nginx() { local wo_linux_distro wo_linux_distro=$(lsb_release -is) local wo_distro_version wo_distro_version=$(lsb_release -sc) if [ -d /var/lib/wo-backup/nginx ]; then /bin/tar -I zstd "$NGINX_BACKUP_FILE" /var/lib/wo-backup/nginx rm -rf /var/lib/wo-backup/nginx fi # backup nginx conf if [ -d /etc/nginx ]; then /usr/bin/rsync -a --noatime /etc/nginx/ /var/lib/wo-backup/nginx/ fi if [ -d /etc/php ]; then /usr/bin/rsync -a --noatime /etc/php/ /var/lib/wo-backup/php/ fi # chec if the package nginx-ee is installed CHECK_NGINX_EE=$(dpkg --list | grep nginx-ee) CHECK_PHP72=$(command -v php-fpm7.2) # install new nginx package if { if [ -n "$CHECK_NGINX_EE" ]; then if [ -x /usr/local/bin/wo ]; then [ -f /etc/apt/preferences.d/nginx-block ] && { mv /etc/apt/preferences.d/nginx-block /var/lib/wo/tmp/nginx-block; } # stop nginx service nginx stop # remove previous package apt-mark unhold nginx-ee nginx-common nginx-custom apt-get autoremove nginx-ee nginx-common nginx-custom --allow-change-held-packages --purge -qq # remove previous php-fpm pool configuration if [ -n "$CHECK_PHP72" ]; then apt-get purge php7.2-fpm -y -qq rm -f /etc/php/7.2/fpm/pool.d/{www.conf,www-two.conf,debug.conf} fi if [ -d /etc/nginx ]; then rm -rf /etc/nginx fi /usr/local/bin/wo stack install --nginx --php rm -f /etc/nginx/common/acl.conf /etc/nginx/htpasswd-wo /usr/bin/rsync -au --noatime /var/lib/wo-backup/nginx/ /etc/nginx/ /usr/local/bin/wo stack upgrade --nginx --force fi fi }; then # restore sites and configuration [ -f /etc/nginx/htpasswd-ee ] && { cp -f /etc/nginx/htpasswd-ee /etc/nginx/htpasswd-wo; } sed -i "s/locations.conf/locations-wo.conf/" /etc/nginx/sites-available/* sed -i "s/locations-php7.conf/locations-wo.conf/" /etc/nginx/sites-available/* sed -i "s/locations-php71.conf/locations-wo.conf/" /etc/nginx/sites-available/* sed -i "s/locations-php72.conf/locations-wo.conf/" /etc/nginx/sites-available/* sed -i "s/locations-php73.conf/locations-wo.conf/" /etc/nginx/sites-available/* sed -i "s/htpasswd-ee/htpasswd-wo/" /etc/nginx/common/acl.conf sed -i 's/ssl on;/#ssl on;/' /var/www/*/conf/nginx/ssl.conf fi # update redis.conf headers if [ -f /etc/nginx/common/redis.conf ]; then sed -i "s/X-Cache /X-SRCache-Fetch-Status /g" /etc/nginx/common/redis.conf sed -i "s/X-Cache-2 /X-SRCache-Store-Status /g" /etc/nginx/common/redis.conf fi VERIFY_NGINX_CONFIG=$(nginx -t 2>&1 | grep failed) # check if nginx -t do not return errors if [ -z "$VERIFY_NGINX_CONFIG" ]; then systemctl stop nginx systemctl start nginx else VERIFY_NGINX_BUCKET=$(nginx -t 2>&1 | grep "server_names_hash_bucket_size") if [ -n "$VERIFY_NGINX_BUCKET" ]; then sed -i "s/# server_names_hash_bucket_size 64;/server_names_hash_bucket_size 128;/g" /etc/nginx/nginx.conf fi systemctl stop nginx systemctl start nginx fi [ -f /var/lib/wo/tmp/nginx-block ] && { mv /var/lib/wo/tmp/nginx-block /etc/apt/preferences.d/nginx-block; } return 0 } wo_update_latest() { # Move ~/.my.cnf to /etc/mysql/conf.d/my.cnf if [ -d /etc/mysql ]; then if [ ! -f /etc/mysql/conf.d/my.cnf ]; then # create conf.d folder if not exist [ ! -d /etc/mysql/conf.d ] && { mkdir -p /etc/mysql/conf.d chmod 755 /etc/mysql/conf.d } if [ -f /root/.my.cnf ]; then cp -f /root/.my.cnf /etc/mysql/conf.d/my.cnf chmod 600 /etc/mysql/conf.d/my.cnf elif [ -f "$HOME/.my.cnf" ]; then cp -f "$HOME/.my.cnf" /etc/mysql/conf.d/my.cnf chmod 600 /etc/mysql/conf.d/my.cnf fi fi fi } wo_backup_ee() { local BACKUP_EE="" [ -d /etc/nginx ] && { BACKUP_EE="$BACKUP_EE /etc/nginx"; } [ -d /etc/letsencrypt ] && { BACKUP_EE="$BACKUP_EE /etc/letsencrypt"; } /bin/tar -I zstd -cf "$EE_BACKUP_FILE" /usr/local/bin/ee /usr/lib/ee/templates /etc/ee /var/lib/ee "$BACKUP_EE" return 0 } wo_backup_wo() { if [ -d /etc/nginx ] && [ -d /etc/wo ] && [ -d /var/lib/wo ]; then /bin/tar -I zstd -cf "$WO_BACKUP_FILE" /etc/nginx /etc/wo /var/lib/wo fi return 0 } wo_clean_ee() { local python_ver python_ver=$(python3 -c "import sys; print(sys.version_info[1])") rm -rf /usr/local/bin/ee /etc/bash_completion.d/ee_auto.rc /usr/lib/ee/templates /usr/local/lib/python3."$python_ver"/dist-packages/ee-*.egg /etc/ee /var/lib/ee return 0 } wo_remove_ee_cron() { crontab -l | sed '/ee site update --le=renew --all 2> \/dev\/null/d' | crontab - } wo_domain_suffix() { _curl https://raw.githubusercontent.com/publicsuffix/list/master/public_suffix_list.dat | sed '/^\/\//d' | sed '/^$/d' | sed 's/^\s+//g' >/var/lib/wo/public_suffix_list.dat } wo_clean() { local python_ver python_ver=$(python3 -c "import sys; print(sys.version_info[1])") rm -rf /usr/local/lib/python3."$python_ver"/dist-packages/{wo-*.egg,cement-*.egg,wordops-*.egg} } wo_uninstall() { local python_ver python_ver=$(python3 -c "import sys; print(sys.version_info[1])") if { /opt/wo/bin/pip list | grep -q "wordops" >/dev/null 2>&1; }; then /opt/wo/bin/pip uninstall wordops -y fi rm -rf /usr/local/lib/python3."$python_ver"/dist-packages/{pystache-*,cement-2.*,wo-*,wordops-*} /usr/local/bin/wo /etc/bash_completion.d/wo_auto.rc /var/lib/wo /etc/wo /usr/lib/wo/templates /opt/wo } wo_clean_repo() { # remove old EasyEngine Nginx repository if [ -f /etc/apt/sources.list.d/ee-repo.list ]; then cp -f /etc/apt/sources.list.d/ee-repo.list /etc/apt/sources.list.d/ee-repo.list.save grep -v "/home:/rtCamp:/EasyEngine" /etc/apt/sources.list.d/ee-repo.list.save >/etc/apt/sources.list.d/ee-repo.list fi if [ -f /etc/apt/sources.list.d/wo-repo.list ]; then local wo_linux_distro wo_linux_distro=$(lsb_release -is) cp -f /etc/apt/sources.list.d/wo-repo.list /etc/apt/sources.list.d/wo-repo.list.save if [ "$wo_linux_distro" = "Ubuntu" ]; then grep -v "opensuse" /etc/apt/sources.list.d/wo-repo.list.save >/etc/apt/sources.list.d/wo-repo.list else grep -v "/home:/rtCamp:/EasyEngine" /etc/apt/sources.list.d/wo-repo.list.save >/etc/apt/sources.list.d/wo-repo.list fi fi } wo_woconf() { if [ -f /etc/wo/wo.conf ]; then if grep -q "log.logging" /etc/wo/wo.conf; then sed -i "s/log.logging/log.colorlog/g" /etc/wo/wo.conf fi if ! grep -q "letsencrypt" /etc/wo/wo.conf; then echo -e '\n[letsencrypt]\n\nkeylength = "ec-384"' >>/etc/wo/wo.conf fi if ! grep -q "php" /etc/wo/wo.conf; then echo -e '\n[php]\n\nversion = 8.2' >>/etc/wo/wo.conf fi fi } wo_fix_kernel() { if [ -f /opt/wo-kernel.sh ]; then chmod +x /opt/wo-kernel.sh fi } wo_init() { ### # 1- Update the apt sewers with fresh info ### if [ -z "$wo_travis" ]; then if ! { apt-get update --allow-releaseinfo-change -qq >/dev/null 2>&1 }; then apt-get update -qq >/dev/null 2>&1 fi if ! command_exists curl; then apt-get -y install curl -qq >/dev/null 2>&1 fi if ! command_exists lsb_release; then apt-get install lsb-release -qq >/dev/null 2>&1 fi if ! command_exists jq; then apt-get install jq -qq >/dev/null 2>&1 fi if ! command_exists gpg; then apt-get install gpg -qq >/dev/null 2>&1 fi fi if [ "$wo_force_install" = "y" ]; then # Check if USER is empty and assign to a variable USER_OR_WORDOPS=${USER:-WordOps} [ ! -f "$HOME/.gitconfig" ] && { bash -c "echo -e \"[user]\n\tname = $USER_OR_WORDOPS\n\temail = root@$HOSTNAME.local\" > $HOME/.gitconfig"; } fi if [ -f ./setup.py ]; then wo_version_new=$(grep "version='" setup.py | awk -F "'" '{print $2}' 2>&1) else wo_version_new=$(curl -m 5 --retry 3 -sL https://api.github.com/repos/WordOps/WordOps/releases/latest 2>&1 | jq -r '.tag_name') fi echo "" wo_lib_echo "Welcome to WordOps install/update script ${wo_version_new}" echo "" } wo_php_fix() { if [ -f /lib/systemd/system/mariadb.service ]; then systemctl daemon-reload systemctl enable mariadb fi } wo_git_secure_path() { if ! grep -q "safe" ~/.gitconfig; then echo -e "\n[safe]\n directory = *" >>~/.gitconfig fi } ### # 4 - WO MAIN SETUP ### # create required directories wo_dir_init # install lsb_release, curl, gpg and display header wo_init # define main variables wo_init_variables # remove old repositories _run wo_clean_repo _run wo_download_gpg_keys if [ -z "$wo_force_install" ]; then # check distribution support wo_check_distro fi # wo uninstall script if [ "$wo_purge" = "y" ]; then _run wo_backup_wo "Backing-up WO install" _run wo_uninstall "Uninstalling WordOps" wo_lib_echo "The WordOps backup files can be found in $WO_BACKUP_FILE" exit 0 else # 1 - WO already installed if [ -x /usr/local/bin/wo ]; then _run wo_clean _run wo_woconf _run wo_fix_kernel _run wo_php_fix _run wo_update_repo # 2 - Migration from EEv3 else if [ -x /usr/local/bin/ee ]; then if [ -z "$wo_force_install" ]; then echo -e "Migrate from EasyEngine to WordOps (y/n): " && read -r WO_ANSWER if [ "$WO_ANSWER" != "y" ] && [ "$WO_ANSWER" != "Y" ]; then wo_lib_error "Not installing WordOps" 1 fi fi _run wo_backup_ee "Backing-up EE install" _run wo_remove_ee_cron "Removing EasyEngine cronjob" fi fi _run wo_install_dep "Installing wo dependencies" _run wo_timesync # skip steps if travis if [ -z "$wo_travis" ]; then #_run wo_download "Downloading WordOps" _run wo_sync_db _run wo_install "Installing WordOps" else _run wo_travis_install "Installing WordOps" fi if [ -x /usr/local/bin/ee ]; then _run wo_upgrade_nginx "Upgrading Nginx" _run wo_clean_ee "Cleaning previous EasyEngine install" fi _run wo_install_acme_sh "Running post-install steps" _run wo_domain_suffix _run wo_update_wp_cli _run wo_update_latest _run secure_wo_db wo sync _run wo_git_secure_path if [ "$ee_migration" = "1" ]; then echo wo_lib_echo "The migration from EasyEngine to WordOps was successful!" wo_lib_echo "The EasyEngine backup files can be found in /var/lib/wo-backup/ee-backup.tgz" echo elif [ "$wo_upgrade" = "1" ]; then wo_lib_echo "WordOps (wo) upgrade to $wo_version_new was successful!" wo_lib_echo "Changelog is available on https://github.com/WordOps/WordOps/releases/tag/$wo_version_new" echo version_to_check="v3.21" if echo "$wo_version_new" | grep -q "$version_to_check"; then wo_lib_echo "To upgrade Nginx package and configuration for HTTP/3 QUIC, use the following command" wo_lib_echo_info "wo stack migrate --nginx" fi echo wo_lib_echo "To upgrade WordOps web stacks, you can use the command:" wo_lib_echo_info "wo stack upgrade" echo wo_lib_echo "To update all other packages, you can use the command:" wo_lib_echo_info "wo maintenance" else wo_lib_echo "WordOps (wo) installed successfully" echo wo_lib_echo "To enable bash-completion, just use the command:" wo_lib_echo_info "bash -l" echo wo_lib_echo "To install WordOps recommended stacks, you can use the command:" wo_lib_echo_info "wo stack install" echo wo_lib_echo "To create a first WordPress site, you can use the command:" wo_lib_echo_info "wo site create site.tld --wp" fi echo wo_lib_echo "WordOps Documentation : https://docs.wordops.net" wo_lib_echo "WordOps Community Forum : https://community.wordops.net" echo wo_lib_echo "Give WordOps a GitHub star : https://github.com/WordOps/WordOps/" echo fi